Supply Chain Incidents

MAL-2025-190649

Malicious code in posthog-react-native-session-replay (npm)

MAL-2025-190646

Malicious code in @postman/csv-parse (npm)

MAL-2025-190637

Malicious code in @asyncapi/generator-react-sdk (npm)

MAL-2025-190638

Malicious code in @asyncapi/modelina (npm)

MAL-2025-190644

Malicious code in @posthog/ai (npm)

MAL-2025-190636

Malicious code in @asyncapi/generator (npm)

MAL-2025-190642

Malicious code in @asyncapi/react-component (npm)

MAL-2025-190641

Malicious code in @asyncapi/protobuf-schema-parser (npm)

MAL-2025-190635

Malicious code in @asyncapi/avro-schema-parser (npm)

MAL-2025-190639

Malicious code in @asyncapi/openapi-schema-parser (npm)

MAL-2025-190640

Malicious code in @asyncapi/parser (npm)

MAL-2025-190647

Malicious code in @postman/tunnel-agent (npm)

MAL-2025-190643

Malicious code in @asyncapi/specs (npm)

MAL-2025-190645

Malicious code in @posthog/core (npm)

MAL-2025-190648

Malicious code in @zapier/zapier-sdk (npm)

MAL-2025-191794

Malicious code in mongland (PyPI)

MAL-2025-191940

Malicious code in zakuchienne (PyPI)

MAL-2025-190803

Malicious code in @ensdomains/cypress-metamask (npm)

MAL-2025-190634

Malicious code in @validate-pubkey/hex (npm)

MAL-2025-190627

Malicious code in chai-async-chain (npm)

MAL-2025-190630

Malicious code in parse-session (npm)

MAL-2025-190631

Malicious code in tailwind-inquirer (npm)

MAL-2025-190632

Malicious code in tailwind-pulse (npm)

MAL-2025-190628

Malicious code in hash-guard (npm)